Open source malware surged 73% in 2025, with npm as a key target with rising risks in software supply chains and developer environments.
An AI tool that can text you and use your apps blew up online. One week and two rebrands later, the question remains: Should you actually use it?
This case study examines how vulnerabilities in AI frameworks and orchestration layers can introduce supply chain risk. Using ...
After changing its name from Clawdbot to Moltbot to OpenClaw within days, the viral AI agent faces security questions and a ...
Peter Steinberger's self-hosted AI tool has rebranded to OpenClaw after trademark conflicts forced changes from Clawd to ...
The RedKitten campaign distributes lures designed to target people seeking information about missing persons or political dissidents in Iran ...
Advanced persistent threat (APT) groups have deployed new tools against a variety of targets, highlighting the increasing ...
RedLine, Lumma, and Vidar adapted in 48 hours. Clawdbot's localhost trust model collapsed, plaintext memory files sit exposed ...
A report from ReversingLabs reveals a massive 73% increase in malicious open-source packages in 2025, with over 10,000 ...
A JavaScript sandbox bug rated CVSS 9.9 enables attackers to bypass AST‑based protections, while a Python execution bypass ...
Stranger Things concept of the “Upside Down” is a useful way to think about the risks lurking in the software we all rely on.
Hackers are on the hunt for open telnet ports in servers after discovering that a version of legacy client-server application ...